Description
KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Database (SPD), which could cause a Security Gateway (SG) that does not use Encapsulating Security Payload (ESP) to forward forged IPv4 packets.
References
- 4224 vdb-entry
- 20020304 [VulnWatch] BSD: IPv4 forwarding doesn't consult inbound SPD in KAME-derived IPsec mailing-list
- 5304 vdb-entry
- http://orange.kame.net/dev/cvsweb.cgi/kame/CHANGELOG
- 20020304 BSD: IPv4 forwarding doesn't consult inbound SPD in KAME-derived IPsec mailing-list
- kame-forged-packet-forwarding(8416) vdb-entry